Your security team suspects that BitLocker recovery keys for a group of 100 devices may have been exposed in a phishing attack. You need to rotate the keys on all affected devices as soon as possible. What should you do?

Run a KQL query to list the devices and then manually rotate each key.

Sync the devices and then wait for the next policy refresh.

Select the affected devices in Intune and use the Rotate BitLocker recovery keys bulk action.

Retire the devices and re-enroll them to generate new keys.

A user reports that their device is not compliant with a conditional access policy, but they are unsure why. The device is enrolled in Intune. You need to investigate the compliance status and identify the specific reason for non-compliance. What should you do?

Sync the device and then check the compliance report.

Collect diagnostics from the device to review logs.

Open the Troubleshooting blade in Intune and search for the user.

Run a KQL query to check the device compliance state.

A Windows 11 device is experiencing frequent crashes, and the user cannot provide useful details. The device is enrolled in Intune and online. You need to gather detailed diagnostic logs to troubleshoot the issue. What should you do?

Restart the device to generate a fresh crash dump.

Sync the device to force a log upload.

Run a KQL query to view recent crash events.

Select the device in Intune and use the Collect diagnostics action.

A user reports that their Windows 11 device is non-compliant, but the compliance policy shows 'Not evaluated'. The device is online and enrolled in Intune. You need to determine why the policy was not evaluated and gather logs for troubleshooting. What should you do first?

Collect diagnostics from the device to gather logs.

Open the Troubleshooting blade for the user to see the policy evaluation status.

Run a KQL query to check the device compliance state.

Sync the device and then check the compliance report.

A company has a group of 50 Windows 11 devices that are being decommissioned. Some devices are corporate-owned and contain sensitive data, while others are personally-owned (BYOD) and contain only company email. You need to remove company data from all devices, but you must preserve personal data on BYOD devices. You also need to ensure that corporate-owned devices are reset to factory settings. What should you do?

Use the Wipe action on all devices to ensure all company data is removed.

Create two device groups: one for corporate-owned devices and one for BYOD devices. Use the Wipe action on the corporate group and the Retire action on the BYOD group.

Use the Retire action on all devices to remove company data.

Use the Sync action on all devices and then manually delete company data.

Microsoft 365 Certified:Endpoint Administrator Associate

Domain 2Objective 4

Perform Remote Actions on Devices MD-102 Practice Questions (Page 6)

Part of the Manage and maintain devices domain, which accounts for 25–30% of the MD-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

11concepts

25–30%of the exam

Questions 26–30

26application · medium
Your security team suspects that BitLocker recovery keys for a group of 100 devices may have been exposed in a phishing attack. You need to rotate the keys on all affected devices as soon as possible. What should you do?
Select an answer first
27application · medium
A user reports that their device is not compliant with a conditional access policy, but they are unsure why. The device is enrolled in Intune. You need to investigate the compliance status and identify the specific reason for non-compliance. What should you do?
Select an answer first
28application · medium
A Windows 11 device is experiencing frequent crashes, and the user cannot provide useful details. The device is enrolled in Intune and online. You need to gather detailed diagnostic logs to troubleshoot the issue. What should you do?
Select an answer first
29expert · hard
A user reports that their Windows 11 device is non-compliant, but the compliance policy shows 'Not evaluated'. The device is online and enrolled in Intune. You need to determine why the policy was not evaluated and gather logs for troubleshooting. What should you do first?
Select an answer first
30expert · hard
A company has a group of 50 Windows 11 devices that are being decommissioned. Some devices are corporate-owned and contain sensitive data, while others are personally-owned (BYOD) and contain only company email. You need to remove company data from all devices, but you must preserve personal data on BYOD devices. You also need to ensure that corporate-owned devices are reset to factory settings. What should you do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MD-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MD-102” is a trademark of its owner, used for identification only.